CCC often reveals new software vulnerabilities. I don't know if it's deliberate, but if they reveal those vulnerabilities at Christmas, they ruin the holiday of whoever is responsible for fixing them - quite likely someone working for a big corporation.